Skip to content

hp197/soapsniffer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

soapsniffer

HTTP Soap sniffer.

Captures network traffic and filters SOAP messages out of them. The SOAP messages are printed to STDOUT, so this program can be used in a pipe construction.

Compiling

chmod +x ./autogen.sh && ./autogen.sh
make && make install

Shipping from source

./autogen.sh && make maintainer-clean && rm -rf m4

Usage

Argument Function
-i Listen for packets on specified interface.
-f Specify a pcap capture filter (same syntax as in tcpdump/tshark)
-d Output debugging info to STDERR. Can be secified up to 5 times for more debuging

Why?

First of all, we wanted to have a program who can output the tcp payloads to STDOUT in clear text. This is why tcpdump was not of any good use for us.

So we looked into tshark and ran it for a time. But what we found was that tshark has some pretty nasty memory leaks and that it should be used with files, rather then STDOUT.

About

HTTP Soap sniffer, used as input for logstash

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published